CVE-2017-10688

Published: Jun 29, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.

Affected (1)

Products: Libtiff: Libtiff

Libtiff

1 product

Libtiff

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Version 4.0.8

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://bugzilla.maptools.org/show_bug.cgi?id=2712

Source: cve@mitre.org

Issue Tracking

http://www.debian.org/security/2017/dsa-3903

Source: cve@mitre.org

http://www.securityfocus.com/bid/99359

Source: cve@mitre.org

https://usn.ubuntu.com/3602-1/

Source: cve@mitre.org

https://www.exploit-db.com/exploits/42299/

Source: cve@mitre.org

http://bugzilla.maptools.org/show_bug.cgi?id=2712